CVE-2026-8149

A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X86_64, AVX, AVX-512f, Linux, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on Linux, X86_64, AVX, AVX-512f. This vulnerability is associated with program files gcm128w, gcm512w, gcm128w.C, gcm512w.C. This issue affects BC-LTS: from 2.73.0 before 2.73.11; BC-FJA: from 2.1.0 before 2.1.3.

• CWE-1068

• https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908149

Published

May 8, 2026

Last Modified

Jul 21, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-8141The Ajax Load More - Filters plugin for WordPress is vulnera…7.2
• CVE-2026-8142VINCE versions 3.0.38 and earlier do not properly verify the…6.5
• CVE-2026-8143The HBook plugin for WordPress is vulnerable to Stored Cross…7.2
• CVE-2026-8144GitLab has remediated an issue in GitLab CE/EE affecting all…4.3
• CVE-2026-8147In MLflow versions prior to 3.14.0, when running with authen…8.1
• CVE-2026-8148NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a …7.8
• CVE-2026-8152Unblu Spark contains an open redirect vulnerability that can…9.3
• CVE-2026-8153OS command injection in Dashboard Server interface in Univer…9.8
• CVE-2026-8155The BuddyPress WordPress plugin before 14.5.0 does not prope…5.4
• CVE-2026-8157The Vitepos WordPress plugin before 3.4.2 does not properly…8.8
• CVE-2026-8158The Signed Video Framework contained a  buffer overflow issu…5.3
• CVE-2026-8159multiparty@4.2.3 and lower versions are vulnerable to denial…7.5